[SECURITY] Fedora 9 Update: R-2.7.2-1.fc9

updates at fedoraproject.org updates at fedoraproject.org
Wed Sep 10 06:53:10 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7670
2008-09-05 10:59:55
--------------------------------------------------------------------------------

Name        : R
Product     : Fedora 9
Version     : 2.7.2
Release     : 1.fc9
URL         : http://www.r-project.org
Summary     : A language for data analysis and graphics
Description :
A language and environment for statistical computing and graphics.
R is similar to the award-winning S system, which was developed at
Bell Laboratories by John Chambers et al. It provides a wide
variety of statistical and graphical techniques (linear and
nonlinear modelling, statistical tests, time series analysis,
classification, clustering, ...).

R is designed as a true computer language with control-flow
constructions for iteration and alternation, and it allows users to
add additional functionality by defining new functions. For
computationally intensive tasks, C, C++ and Fortran code can be linked
and called at run time.

--------------------------------------------------------------------------------
Update Information:

Update to R 2.7.2, also fixes security issue with unsafe temp directory handling
in javareconf script.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Aug 29 2008 Tom "spot" Callaway <tcallawa at redhat.com> 2.7.2-1
- update to 2.7.2
- fix spec for alpha compile (bz 458931)
- fix security issue in javareconf script (bz 460658)
* Mon Jul  7 2008 Tom "spot" Callaway <tcallawa at redhat.com> 2.7.1-1
- update to 2.7.1
* Wed May 28 2008 Tom "spot" Callaway <tcallawa at redhat.com> 2.7.0-5
- add cairo-devel to BR/R, so that cairo backend gets built
* Wed May 21 2008 Tom "spot" Callaway <tcallawa at redhat.com> 2.7.0-4
- fixup sed invocation added in -3
- make -devel package depend on base R = version-release
- fix bad paths in package html files
* Wed May 21 2008 Tom "spot" Callaway <tcallawa at redhat.com> 2.7.0-3
- fix poorly constructed file paths in html/packages.html (bz 442727)
* Tue May 13 2008 Tom "spot" Callaway <tcallawa at redhat.com> 2.7.0-2
- add patch from Martyn Plummer to avoid possible bad path hardcoding in 
  /usr/bin/Rscript
- properly handle ia64 case (bz 446181)
* Mon Apr 28 2008 Tom "spot" Callaway <tcallawa at redhat.com> 2.7.0-1
- update to 2.70
- rcompgen is no longer a standalone package
- redirect javareconf to /dev/null (bz 442366)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #460658 - R: Insecure auxiliary /tmp file usage (symlink attack possible)
        https://bugzilla.redhat.com/show_bug.cgi?id=460658
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update R' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list